Last month, a significant development emerged from a federal criminal case where Microsoft’s Global Device Identifier (GDID) played a pivotal role in aiding the FBI in apprehending an alleged hacker. While the intention behind this persistent tracking technology is commendable, the broader implications of having such a feature embedded in Windows have raised concerns among privacy advocates. This growing unease has prompted Windscribe, a prominent VPN provider, to take action.
Introducing deGDID
In response to these concerns, Windscribe has launched an innovative open-source project known as “deGDID.” This script is designed to remove the GDID from users’ PCs, albeit with the caveat that it may disrupt certain Microsoft cloud services. Available on GitHub, the script can be executed via PowerShell with administrative privileges, offering a straightforward solution for those looking to enhance their privacy.
The deGDID script operates with three primary execution flags:
- –Status: This read-only flag informs users whether a GDID is currently active on their device.
- –Status –Redact: This option generates logs with the GDID redacted, allowing users to share diagnostic data without compromising their privacy.
- –Protect: This powerful command completely removes the GDID and prevents the creation of new identifiers.
Users who have tested the script report that it functions effectively. For instance, running the –Status flag revealed multiple cached GDIDs, which were subsequently removed using the –Protect command. Notably, no new GDID appeared even after a system restart. However, this process did trigger some issues with Microsoft applications, resulting in connection errors and blocked account verifications on certain platforms, although access through others remained intact.
Windscribe emphasizes that deGDID is a research project, one that will evolve as further insights into the workings of GDID are uncovered. While the script represents a proactive step in combating hidden tracking mechanisms, it does come with trade-offs. The potential for core Microsoft services to malfunction may deter some users from utilizing this solution. Additionally, it does not guarantee the eradication of every GDID instance, and Microsoft retains access to previous keys, indicating that this approach is not without its limitations. Nonetheless, it marks a promising beginning in the ongoing battle for digital privacy.
